Sunday, November 24, 2024
HomeCyber Security NewsWi-Fi Bug in Millions of Amazon Echo and Kindle Devices Let Attackers...

Wi-Fi Bug in Millions of Amazon Echo and Kindle Devices Let Attackers Steal Sensitive Details

Published on

The KRACK attack was published by two Belgian researchers in October 2017. The attacks are based on the weaknesses in the WPA2 protocol used in modern Wi-Fi devices.

The weakness can be exploited by the attackers using key reinstallation attacks if the victim resides within the network. Successful exploitation of the attack allows attackers to steal sensitive details such as credit card numbers, passwords, chat messages, emails, photos, and so on.

KRACK in Amazon Echo & Kindle

Amazon Echo and Kindle devices are so popular and they are used by Millions of users around the globe. ESET Smart Home researchers observed that Amazon Echo and Kindle devices are vulnerable to KRACK attacks.

- Advertisement - SIEM as a Service

Researchers tested the 1st generation of the Amazon Echo devices with original Amazon Alexa and the 8th generation of Amazon Kindle are vulnerable to two KRACK vulnerabilities.

With KRACK scripts, ESET researchers able to “replicate the reinstallation of the pairwise encryption key (PTK-TK) in the four-way handshake (CVE-2017-13077) and reinstallation of the group key (GTK) in the four-way handshake (CVE-2017-13078).”

According to the ESET team, the vulnerabilities let attackers to

  • Replay old packets to cause a DOS attack or interruptions.
  • Decrypt the data transmitted.
  • Attackers can also forge packets.
  • It can also intercept sensitive details such as passwords or session cookies.

The Amazon home assistant found to be vulnerable to other network vulnerabilities than KRACK. The vulnerability lets attackers launch a broadcast replay attack.

The vulnerabilities were reported to Amazon on October 23rd, 2018 and Amazon acknowledged the issue and on January 8th, 2019 ESET receives that Amazon can replicate the issue.

To fix the vulnerabilities Amazon distributing a new version of software application wpa_supplicant that responsible for correct authentication to the Wi-Fi network.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Nearest Neighbor Attacks: Russian APT Hack The Target By Exploiting Nearby Wi-Fi Networks

Recent research has revealed that a Russian advanced persistent threat (APT) group, tracked as...

240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft

Microsoft's Digital Crimes Unit (DCU) has disrupted a significant phishing-as-a-service (PhaaS) operation run by...

Russian TAG-110 Hacked 60+ Users With HTML Loaded & Python Backdoor

The Russian threat group TAG-110, linked to BlueDelta (APT28), is actively targeting organizations in...

Earth Kasha Upgraded Their Arsenal With New Tactics To Attack Organizations

Earth Kasha, a threat actor linked to APT10, has expanded its targeting scope to...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Nearest Neighbor Attacks: Russian APT Hack The Target By Exploiting Nearby Wi-Fi Networks

Recent research has revealed that a Russian advanced persistent threat (APT) group, tracked as...

240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft

Microsoft's Digital Crimes Unit (DCU) has disrupted a significant phishing-as-a-service (PhaaS) operation run by...

Russian TAG-110 Hacked 60+ Users With HTML Loaded & Python Backdoor

The Russian threat group TAG-110, linked to BlueDelta (APT28), is actively targeting organizations in...